POPIA Compliance Statement

Our Information Officer, Craig Lefkowitz, is responsible for ensuring POPIA compliance across all operations.

We only collect personal information adequate, relevant and not excessive for our healthcare platform purposes.

Information is collected for facilitating referrals, scheduling, quotations, QR document authentication, and billing.

Personal information will not be processed incompatibly with the purposes for which it was collected.

We take reasonable steps to ensure personal information is complete and accurate.

Our Privacy Policy and POPIA Statement are publicly available. A PAIA Manual is available on request.

TLS 1.3 encryption, encrypted storage, multi-tenant isolation, Auth0 authentication, cryptographic QR signatures, and intrusion prevention.

Data subjects may request access, correction, deletion, or object to processing. Contact privacy@dr2dr.co.za. We respond within 30 days.